Once you create an incident manually or by using an automated process, the next step is to further investigate the incident, create a remediation task, add journal entries to include specifics and additional information for the incident, track the remediation tasks to closure, push the tasks as help desk tickets to resolve them, and finally decommission the incident.
Investigate an Incident
The various stages as part of investigating an incident and the actions performed by an administrator are outlined in the table below.
|Refer to View Incident Details.|
|Refer to Add a Journal Entry.|
|Refer to Create a Remediation Task.|
|Refer to Send a Remediation Task as a Helpdesk Ticket.|
|Refer to Close an Incident.|